BSIMM

BSIMM Intelligence (Attack Models, Security Features & Design, Standards & Requirements)

BSIMM SR1.5: Identify open source and manage its risk

Standards & Requirements. Open source components are identified and their risk managed so known-vulnerable or non-compliant components are controlled.

Other controls in BSIMM Intelligence (Attack Models, Security Features & Design, Standards & Requirements)

AM1.2 Create a data classification scheme and inventory
AM1.3 Identify potential attackers
AM1.5 Gather and use attack intelligence
SFD1.1 Build and publish security features
SFD1.2 Engage architecture teams with security
SR1.1 Create security standards
SR1.3 Translate compliance constraints to requirements

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All BSIMM controls